cve/2024/CVE-2024-23725.md
2024-05-25 21:48:12 +02:00

574 B

CVE-2024-23725

Description

Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js. An XSS payload can be rendered in post summaries.

POC

Reference

No PoCs from references.

Github